limpbizkit Posted December 5, 2008 Share Posted December 5, 2008 1) Can not download things like xp sp 3. Or any file that comes from a site like .download.etc. 2) Can not even install AVG. 3) Copybook.com .. Really annoying redirecter 4) Redirect Loop Redirection limit for this URL exceeded. Unable to load the requested page. This may be caused by cookies that are blocked. The browser has stopped trying to retrieve the requested item. The site is redirecting the request in a way that will never complete. * Have you disabled or blocked cookies required by this site? * NOTE: If accepting the site's cookies does not resolve the problem, it is probably a server configuration issue and not your computer. All are happening regular. Connection is fine .. I can play on xbox live etc without ANY problems .. =/ Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
sloter Posted December 5, 2008 Share Posted December 5, 2008 Try a differnet browser? Link to comment Share on other sites More sharing options...
Orpheus Posted December 5, 2008 Share Posted December 5, 2008 Try a differnet browser? Don't think he can download another browser. He can't download stuff. I was going to eat hot dogs for dinner tonight. I think I will settle for cereal. OPEN WIDE HERE COMES THE HELICOPTER. Link to comment Share on other sites More sharing options...
limpbizkit Posted December 5, 2008 Author Share Posted December 5, 2008 Try a differnet browser? Don't think he can download another browser. He can't download stuff. I get the same problem regardless of browser. I usualy use firefox as it is. Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
dsavi Posted December 5, 2008 Share Posted December 5, 2008 Have you tried, as it suggested, accepting blocked cookies? Link to comment Share on other sites More sharing options...
limpbizkit Posted December 5, 2008 Author Share Posted December 5, 2008 Have you tried, as it suggested, accepting blocked cookies? Yes. Failed to Connect The connection was refused when attempting to contact download.microsoft.com. Though the site seems valid, the browser was unable to establish a connection. * Could the site be temporarily unavailable? Try again later. * Are you unable to browse other sites? Check the computer's network connection. * Is your computer or network protected by a firewall or proxy? Incorrect settings can interfere with Web browsing. When I try to download sp3. Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
D. V. Devnull Posted December 6, 2008 Share Posted December 6, 2008 1) Can not download things like xp sp 3. Or any file that comes from a site like .download.etc. 2) Can not even install AVG. 3) Copybook.com .. Really annoying redirecter 4) Redirect Loop Redirection limit for this URL exceeded. Unable to load the requested page. This may be caused by cookies that are blocked. The browser has stopped trying to retrieve the requested item. The site is redirecting the request in a way that will never complete. * Have you disabled or blocked cookies required by this site? * NOTE: If accepting the site's cookies does not resolve the problem, it is probably a server configuration issue and not your computer. All are happening regular. Connection is fine .. I can play on xbox live etc without ANY problems .. =/ The piece of info I have made bold in the quote above says exactly one thing: Major virus. limpbizkit, go to a PC which is not infected, and build an "assault disc" (Definition of "assault disc" = "A disc full of good utilities, designed to clean up a computer's problems") ... Preferably, loaded with a portable set of antispyware/antimalware programs, antivirus programs, and HiJackThis... After building, use on the computer with the problems, if you can. I sense this problem may be so bad that you have to rebuild that computer. :-k ~Mr. "If it ain't one thing, it's another." Devnull and normally with a cool mind.(Warning: This user can be VERY confusing to some people... And talks in 3rd person for the timebeing due to how insane they are... Sometimes even to themself.) Link to comment Share on other sites More sharing options...
limpbizkit Posted December 6, 2008 Author Share Posted December 6, 2008 1) Can not download things like xp sp 3. Or any file that comes from a site like .download.etc. 2) Can not even install AVG. 3) Copybook.com .. Really annoying redirecter 4) Redirect Loop Redirection limit for this URL exceeded. Unable to load the requested page. This may be caused by cookies that are blocked. The browser has stopped trying to retrieve the requested item. The site is redirecting the request in a way that will never complete. * Have you disabled or blocked cookies required by this site? * NOTE: If accepting the site's cookies does not resolve the problem, it is probably a server configuration issue and not your computer. All are happening regular. Connection is fine .. I can play on xbox live etc without ANY problems .. =/ The piece of info I have made bold in the quote above says exactly one thing: Major virus. limpbizkit, go to a PC which is not infected, and build an "assault disc" (Definition of "assault disc" = "A disc full of good utilities, designed to clean up a computer's problems") ... Preferably, loaded with a portable set of antispyware/antimalware programs, antivirus programs, and HiJackThis... After building, use on the computer with the problems, if you can. I sense this problem may be so bad that you have to rebuild that computer. :-k ~Mr. "If it ain't one thing, it's another." Devnull That actually really confuses me because I have no problems installing things like anti spy ware etc .. Ill post the error from AVG In a mo .. And after only a few days re formating my pc.. =/ Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
D. V. Devnull Posted December 6, 2008 Share Posted December 6, 2008 <<<Quote Snip>>> That actually really confuses me because I have no problems installing things like anti spy ware etc .. Ill post the error from AVG In a mo .. And after only a few days re formating my pc.. =/ Only a few days? I hope you back up your personal data, then. :? Hmm... Maybe I'm wrong, and you don't have a nasty virus/malware on your PC... I'd like it if I was wrong about that. :-k ~D. V. "Intriguing... What problem exists here?" Devnull and normally with a cool mind.(Warning: This user can be VERY confusing to some people... And talks in 3rd person for the timebeing due to how insane they are... Sometimes even to themself.) Link to comment Share on other sites More sharing options...
limpbizkit Posted December 6, 2008 Author Share Posted December 6, 2008 <<<Quote Snip>>> That actually really confuses me because I have no problems installing things like anti spy ware etc .. Ill post the error from AVG In a mo .. And after only a few days re formating my pc.. =/ Only a few days? I hope you back up your personal data, then. :? Hmm... Maybe I'm wrong, and you don't have a nasty virus/malware on your PC... I'd like it if I was wrong about that. :-k ~D. V. "Intriguing... What problem exists here?" Devnull You and me both .. Going to re download AVG and try avast. Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
limpbizkit Posted December 6, 2008 Author Share Posted December 6, 2008 Local machine: installation failed Installation: Error: Action failed for registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows: creating registry key.... Error 0x80070005 Avast installed perfectly fine. Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
Sbrideau Posted December 6, 2008 Share Posted December 6, 2008 Anyway, AVG is not good at all, despite being good in the past, it's now out of the range of good antiviruses. Link to comment Share on other sites More sharing options...
Dracion1 Posted December 6, 2008 Share Posted December 6, 2008 See if you can download HijackThis and post the log on here. As for antivirus, Avira is a much better free av than AVG. "In the beginning, the universe was created. This has made a lot of people very angry and been widely regarded as a bad move." Link to comment Share on other sites More sharing options...
limpbizkit Posted December 7, 2008 Author Share Posted December 7, 2008 HJT: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:37:48, on 07/12/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss[Caution: Executable File] C:\WINDOWS\system32\winlogon[Caution: Executable File] C:\WINDOWS\system32\services[Caution: Executable File] C:\WINDOWS\system32\lsass[Caution: Executable File] C:\WINDOWS\system32\svchost[Caution: Executable File] C:\WINDOWS\System32\svchost[Caution: Executable File] C:\WINDOWS\system32\ZoneLabs\vsmon[Caution: Executable File] C:\WINDOWS\Explorer[Caution: Executable File] C:\WINDOWS\system32\spoolsv[Caution: Executable File] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService[Caution: Executable File] C:\Program Files\Bonjour\mDNSResponder[Caution: Executable File] C:\WINDOWS\eHome\ehRecvr[Caution: Executable File] C:\WINDOWS\eHome\ehSched[Caution: Executable File] C:\WINDOWS\system32\nvsvc32[Caution: Executable File] C:\WINDOWS\system32\dllhost[Caution: Executable File] C:\WINDOWS\system32\wscntfy[Caution: Executable File] C:\WINDOWS\ehome\ehtray[Caution: Executable File] C:\Program Files\Common Files\AOL\1228348988\ee\AOLSoftware[Caution: Executable File] C:\WINDOWS\stsystra[Caution: Executable File] C:\WINDOWS\system32\RUNDLL32[Caution: Executable File] C:\Program Files\iTunes\iTunesHelper[Caution: Executable File] C:\Program Files\Zone Labs\ZoneAlarm\zlclient[Caution: Executable File] C:\WINDOWS\System32\svchost[Caution: Executable File] C:\program files\steam\steam[Caution: Executable File] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: Executable File] C:\WINDOWS\eHome\ehmsas[Caution: Executable File] C:\Program Files\iPod\bin\iPodService[Caution: Executable File] C:\Program Files\iTunes\iTunes[Caution: Executable File] C:\Program Files\Last.fm\LastFM[Caution: Executable File] C:\WINDOWS\system32\wuauclt[Caution: Executable File] C:\Program Files\Mozilla Firefox\firefox[Caution: Executable File] C:\Program Files\Windows Live\Messenger\msnmsgr[Caution: Executable File] C:\Program Files\Windows Live\Messenger\usnsvc[Caution: Executable File] C:\Program Files\Last.fm\iPodScrobbler[Caution: Executable File] C:\Program Files\Trend Micro\HijackThis\HijackThis[Caution: Executable File] R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.aol.co.uk/web?isinit=true&query=%s R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray[Caution: Executable File] O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1228348988\ee\AOLSoftware[Caution: Executable File] O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra[Caution: Executable File] O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32[Caution: Executable File] C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz[Caution: Executable File] /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32[Caution: Executable File] C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask[Caution: Executable File]" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper[Caution: Executable File]" O4 - HKLM\..\Run: [C] C:\WINDOWS\system32\kduwd[Caution: Executable File] O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient[Caution: Executable File]" O4 - HKCU\..\Run: [steam] "c:\program files\steam\steam[Caution: Executable File]" -silent O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: Executable File] O4 - HKUS\S-1-5-19\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\system32\CTFMON[Caution: Executable File] (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\system32\CTFMON[Caution: Executable File] (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\system32\CTFMON[Caution: Executable File] (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\system32\CTFMON[Caution: Executable File] (User 'Default user') O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: Executable File] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: Executable File] O17 - HKLM\System\CCS\Services\Tcpip\..\{EB6B8959-6A5D-4DB6-B735-6852944ECA74}: NameServer = 85.255.112.176;85.255.112.125 O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: Executable File] O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService[Caution: Executable File] O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder[Caution: Executable File] O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService[Caution: Executable File] O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32[Caution: Executable File] O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon[Caution: Executable File] -- End of file - 4865 bytes Avira: Avira AntiVir Personal Report file date: 07 December 2008 09:03 Scanning for 1038808 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: SHIELA Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00 AVSCAN[Caution: Executable File] : 8.1.4.10 315649 Bytes 18/11/2008 09:21:26 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 12:30:36 ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 17:57:13 ANTIVIR2.VDF : 7.1.0.89 221184 Bytes 16/11/2008 17:16:47 ANTIVIR3.VDF : 7.1.0.97 45056 Bytes 17/11/2008 17:38:59 Engineversion : 8.2.0.31 AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:56 AESCRIPT.DLL : 8.1.1.15 332156 Bytes 11/11/2008 15:00:07 AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 16:06:41 AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 14:58:38 AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 10:41:39 AEOFFICE.DLL : 8.1.0.30 196986 Bytes 07/11/2008 16:06:41 AEHEUR.DLL : 8.1.0.71 1487222 Bytes 07/11/2008 16:06:41 AEHELP.DLL : 8.1.1.3 119157 Bytes 07/11/2008 16:06:41 AEGEN.DLL : 8.1.1.0 319859 Bytes 07/11/2008 16:06:41 AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:56 AECORE.DLL : 8.1.4.1 172405 Bytes 07/11/2008 16:06:41 AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 13:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: 07 December 2008 09:03 The scan of running processes will be started Scan process 'avscan[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'update[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'avcenter[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'firefox[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'avgnt[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'avguard[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'sched[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'usnsvc[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'msnmsgr[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'LastFM[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'iTunes[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'iPodService[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'ehmsas[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'TeaTimer[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'Steam[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'zlclient[Caution: Executable File]' - '0' Module(s) have been scanned Scan process 'iTunesHelper[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'rundll32[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'stsystra[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'aolsoftware[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'ehtray[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'alg[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'wscntfy[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'dllhost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'mcrdsvc[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'nvsvc32[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'ehSched[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'ehRecvr[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'mDNSResponder[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'AppleMobileDeviceService[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'spoolsv[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'explorer[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'vsmon[Caution: Executable File]' - '0' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'svchost[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'lsass[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'services[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'winlogon[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'csrss[Caution: Executable File]' - '1' Module(s) have been scanned Scan process 'smss[Caution: Executable File]' - '1' Module(s) have been scanned 43 processes with 43 modules were scanned Starting master boot sector scan: Master boot sector HD0 [iNFO] No virus was found! Master boot sector HD1 [iNFO] No virus was found! Master boot sector HD2 [iNFO] No virus was found! [WARNING] System error [21]: The device is not ready. Master boot sector HD3 [iNFO] No virus was found! [WARNING] System error [21]: The device is not ready. Master boot sector HD4 [iNFO] No virus was found! [WARNING] System error [21]: The device is not ready. Master boot sector HD5 [iNFO] No virus was found! [WARNING] System error [21]: The device is not ready. Master boot sector HD6 [iNFO] No virus was found! [WARNING] System error [87]: The parameter is incorrect. Start scanning boot sectors: Boot sector 'C:' [iNFO] No virus was found! Starting to scan the registry. The registry was scanned ( '55' files ). Starting the file scan: Begin scan in 'C:' C:\pagefile.sys [WARNING] The file could not be opened! C:\System Volume Information\_restore{E6F1F89D-C059-462C-85C0-5F97A5F1AE32}\RP15\A0001475.dll [DETECTION] Is the TR/StartPage.bah.1 Trojan [NOTE] The file was moved to '496b93f9.qua'! C:\System Volume Information\_restore{E6F1F89D-C059-462C-85C0-5F97A5F1AE32}\RP15\A0001476.dll [DETECTION] Is the TR/StartPage.bah.2 Trojan [NOTE] The file was moved to '496b93fd.qua'! C:\System Volume Information\_restore{E6F1F89D-C059-462C-85C0-5F97A5F1AE32}\RP15\A0001487.dll [DETECTION] Is the TR/StartPage.bah.1 Trojan [NOTE] The file was moved to '496b9400.qua'! C:\System Volume Information\_restore{E6F1F89D-C059-462C-85C0-5F97A5F1AE32}\RP15\A0001495.dll [DETECTION] Is the TR/StartPage.bah.1 Trojan [NOTE] The file was moved to '496b9403.qua'! C:\System Volume Information\_restore{E6F1F89D-C059-462C-85C0-5F97A5F1AE32}\RP15\A0001503.dll [DETECTION] Is the TR/StartPage.bah.1 Trojan [NOTE] The file was moved to '496b9405.qua'! C:\System Volume Information\_restore{E6F1F89D-C059-462C-85C0-5F97A5F1AE32}\RP15\A0001511.dll [DETECTION] Is the TR/StartPage.bah.1 Trojan [NOTE] The file was moved to '496b9407.qua'! C:\WINDOWS\SoftwareDistribution\Download\b5a0d96b7c12dd2c0335206a1ae160ae\BIT85.tmp [0] Archive type: CAB (Microsoft) --> _sfx_0008._p [WARNING] No further files can be extracted from this archive. The archive will be closed End of the scan: 07 December 2008 09:19 Used time: 15:51 Minute(s) The scan has been done completely. 4763 Scanning directories 84245 Files were scanned 6 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 6 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 84238 Files not concerned 713 Archives were scanned 7 Warnings 6 Notes Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
D. V. Devnull Posted December 7, 2008 Share Posted December 7, 2008 O17 - HKLM\System\CCS\Services\Tcpip\..\{EB6B8959-6A5D-4DB6-B735-6852944ECA74}: NameServer = 85.255.112.176;85.255.112.125 Did your ISP put that there? Or did you need to put it there for some reason? If the answer to both of those are "NO", then there is a chance that they were put there by malware. (Personally, I hope they're just your ISP DNS Servers...) :geek: Also, check your hosts file, located in "C:\Windows\System32\drivers\etc"... Look for anything that contains something like "127.0.0.1 <site url>" (no quotes, obviously) ... If there are any with site URLs that you need to get to, then those may also be the result of malware. :-s ~D. V. "What's going on here?" Devnull and normally with a cool mind.(Warning: This user can be VERY confusing to some people... And talks in 3rd person for the timebeing due to how insane they are... Sometimes even to themself.) Link to comment Share on other sites More sharing options...
limpbizkit Posted December 8, 2008 Author Share Posted December 8, 2008 O17 - HKLM\System\CCS\Services\Tcpip\..\{EB6B8959-6A5D-4DB6-B735-6852944ECA74}: NameServer = 85.255.112.176;85.255.112.125 Did your ISP put that there? Or did you need to put it there for some reason? If the answer to both of those are "NO", then there is a chance that they were put there by malware. (Personally, I hope they're just your ISP DNS Servers...) :geek: Also, check your hosts file, located in "C:\Windows\System32\drivers\etc"... Look for anything that contains something like "127.0.0.1 <site url>" (no quotes, obviously) ... If there are any with site URLs that you need to get to, then those may also be the result of malware. :-s ~D. V. "What's going on here?" Devnull Ok will do that when I get a chance later. If they are isp I can reinstall them because I have all my drivers on disc. Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
D. V. Devnull Posted December 8, 2008 Share Posted December 8, 2008 O17 - HKLM\System\CCS\Services\Tcpip\..\{EB6B8959-6A5D-4DB6-B735-6852944ECA74}: NameServer = 85.255.112.176;85.255.112.125 Did your ISP put that there? Or did you need to put it there for some reason? If the answer to both of those are "NO", then there is a chance that they were put there by malware. (Personally, I hope they're just your ISP DNS Servers...) :geek: Also, check your hosts file, located in "C:\Windows\System32\drivers\etc"... Look for anything that contains something like "127.0.0.1 <site url>" (no quotes, obviously) ... If there are any with site URLs that you need to get to, then those may also be the result of malware. :-s ~D. V. "What's going on here?" Devnull Ok will do that when I get a chance later. If they are isp I can reinstall them because I have all my drivers on disc. Heck, if you just copy down the properties from your Advanced TCP/IP Settings, as well as those IP numbers, then you'll be able to rebuild it later without need for drivers... (Unless you have to reinstall the ethernet/wireless/etc., that is.) :) ~D. V. "A bit simpler than some realize." Devnull and normally with a cool mind.(Warning: This user can be VERY confusing to some people... And talks in 3rd person for the timebeing due to how insane they are... Sometimes even to themself.) Link to comment Share on other sites More sharing options...
limpbizkit Posted December 8, 2008 Author Share Posted December 8, 2008 O17 - HKLM\System\CCS\Services\Tcpip\..\{EB6B8959-6A5D-4DB6-B735-6852944ECA74}: NameServer = 85.255.112.176;85.255.112.125 Did your ISP put that there? Or did you need to put it there for some reason? If the answer to both of those are "NO", then there is a chance that they were put there by malware. (Personally, I hope they're just your ISP DNS Servers...) :geek: Also, check your hosts file, located in "C:\Windows\System32\drivers\etc"... Look for anything that contains something like "127.0.0.1 <site url>" (no quotes, obviously) ... If there are any with site URLs that you need to get to, then those may also be the result of malware. :-s ~D. V. "What's going on here?" Devnull Ok will do that when I get a chance later. If they are isp I can reinstall them because I have all my drivers on disc. Heck, if you just copy down the properties from your Advanced TCP/IP Settings, as well as those IP numbers, then you'll be able to rebuild it later without need for drivers... (Unless you have to reinstall the ethernet/wireless/etc., that is.) :) ~D. V. "A bit simpler than some realize." Devnull Only problem that comes with that is swapping isp .. =[ .. Just wish there was ONE descent isp in the uk .. XD .. But yeah Ill sort them in a few hours when im not half a sleep like I have been all day. Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
limpbizkit Posted December 9, 2008 Author Share Posted December 9, 2008 Thanks guys. Got it solved with the soloution DV gave. :) Tif 360 MGC Leaderboard Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now